Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
8.8

Chromium download manager can be exploited via web page

CVE-2019-5829 · published 7 years ago
Summary

The download manager in Chromium versions before 75.0.3770.80 can be tricked by a crafted web page to access memory it shouldn't. This could let an attacker cause a crash or potentially take control of the browser. Update Chromium to version 75.0.3770.80 or newer to fix the issue.

What to do
  • Update debian chromium to version 75.0.3770.80-1.
  • Update google chrome to version 75.0.3770.80 or later.
Affected software
Ecosystem VendorProductAffected versions
Debian:12 debian chromium < 75.0.3770.80-1
Fix: upgrade to 75.0.3770.80-1
Debian:13 debian chromium < 75.0.3770.80-1
Fix: upgrade to 75.0.3770.80-1
Debian:14 debian chromium < 75.0.3770.80-1
Fix: upgrade to 75.0.3770.80-1
– google chrome < 75.0.3770.80
cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*
– opensuse backports sle-15
cpe:2.3:o:opensuse:backports:sle-15:-:*:*:*:*:*:*
– opensuse leap 15.0
15.1
42.3
cpe:2.3:o:opensuse:leap:15.0:*:*:*:*:*:*:*
– debian debian_linux 10.0
cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*
– fedoraproject fedora 29
30
cpe:2.3:o:fedoraproject:fedora:29:*:*:*:*:*:*:*
Original advisory text
Integer overflow in download manager in Google Chrome prior to 75.0.3770.80 allowed a remote attacker to potentially perform out of bounds memory access via a crafted HTML page.
Integer overflow in download manager in Google Chrome prior to 75.0.3770.80 allowed a remote attacker to potentially perform out of bounds memory access via a crafted HTML page.
References
Severity
8.8 High
Exploitation
1% chance of attack within 30 days
Type
CWE-190Integer Overflow
Timeline
Published27 Jun 2019
Updated4 Nov 2026
First seen21 Sep 2026
Sources
DEBIAN-CVE-2019-5829 · OSV
CVE-2019-5829 · NVD
Track software like this
Free during beta